This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer File: otDn34iradtuBZowZOTdweb8nRk.cer (raw, json) Hash identifier: GhQ9UP3MMka771nKfJe/nEAqM7AfQzTWoBBbtCJxiO8= Subject key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 027758 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft caRepository: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Mon 24 Nov 2025 08:43:03 +0000 Certificate not after: Fri 01 May 2026 00:00:00 +0000 Subordinate resources: AS: 133204 IP: 103.224.20.0/24 IP: 2001:df1:c800::/48 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161624 (0x27758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 24 08:43:03 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:d9:54:34:18:b4:0a:7b:85:3e:21:f6:21: fc:3d:08:57:a0:bc:70:93:4a:2e:3d:89:c4:d1:29: 3b:b5:cd:62:3b:6d:99:71:49:df:8d:ef:f0:86:6c: 1b:fb:42:59:10:b5:b4:06:f9:f6:53:25:5b:52:f2: 08:7d:d1:91:ba:17:24:d1:81:4a:67:46:fa:dc:16: e0:50:d4:71:47:e0:78:48:26:a4:9c:19:a4:56:9d: 13:26:56:fb:b2:7a:2c:05:ca:37:e0:fe:19:af:1f: 62:3a:22:4d:ac:67:05:be:8c:da:a3:11:42:31:83: 6c:ca:99:8d:27:7b:3c:c5:8f:62:4e:ae:82:9f:c1: 19:e9:71:12:8f:8f:4b:75:3e:3a:25:53:14:9d:23: 17:c6:3a:20:aa:b1:53:98:03:ea:96:5b:f4:0b:e8: 9f:c0:29:52:0d:f5:7c:12:14:16:e1:2b:d7:2f:ad: 43:4c:9f:96:c3:f7:cc:51:73:aa:87:8c:0a:98:2f: 15:1f:d4:99:64:dc:7c:c2:c1:92:89:b0:bd:6f:94: e7:05:9e:6c:46:dd:b6:25:51:f7:6a:93:21:af:06: ea:02:53:74:7f:b0:bb:8d:0a:25:71:2a:08:34:78: 27:15:d6:53:b3:ef:09:50:48:55:ea:f2:8f:9d:e6: e1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 133204 sbgp-ipAddrBlock: critical IPv4: 103.224.20.0/24 IPv6: 2001:df1:c800::/48 Signature Algorithm: sha256WithRSAEncryption 28:99:52:48:6d:7d:c0:a9:38:c2:9c:44:74:8b:cc:d5:2c:fa: 3c:be:27:ca:98:3d:f5:2a:0b:39:6e:f3:ef:f0:1b:84:39:fb: ec:92:ef:c6:49:15:7b:25:3f:86:20:c0:4d:ff:be:62:88:d8: 08:87:ef:30:32:5e:46:99:54:22:3e:2e:f2:9d:f8:e6:c2:ba: ef:0a:46:a2:29:46:89:1f:fe:19:48:a4:67:b0:5e:fe:37:41: 51:0f:90:3c:aa:ef:cd:34:76:78:c2:c7:4a:93:86:7d:c6:f7: c4:58:30:15:40:8c:09:99:c1:57:63:99:c3:b4:a0:6b:3e:94: ef:44:7f:54:54:0d:b1:2d:21:d5:28:a1:bb:b3:ad:45:cc:2e: eb:91:5f:7f:b1:e5:46:0a:f9:13:e2:db:cd:90:6e:e0:5e:36: e8:b4:2b:2d:c5:3a:08:a6:20:42:04:97:7c:fa:32:05:e8:16: d8:33:50:49:92:9f:82:db:5d:de:34:f5:41:b6:56:df:8f:5f: 27:c3:60:84:54:47:db:cc:37:ff:7d:09:c4:36:11:e5:e1:0e: 24:26:15:af:f4:80:3c:4e:48:d6:aa:f6:16:01:b4:85:b8:d9: 61:b0:46:93:b0:b1:0f:07:63:fb:02:b4:64:94:d3:52:05:4b: 93:c3:0c:46 -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIDAndYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyNDA4NDMwM1oXDTI2MDUwMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxM0QyRDgxMTAvBgNVBAUTKEEyRDBFN0RGODhBQjY5REI2RTA1OUEz MDY0RTREREMxRTZGQzlEMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD9NlUNBi0CnuFPiH2Ifw9CFegvHCTSi49icTRKTu1zWI7bZlxSd+N7/CGbBv7 QlkQtbQG+fZTJVtS8gh90ZG6FyTRgUpnRvrcFuBQ1HFH4HhIJqScGaRWnRMmVvuy eiwFyjfg/hmvH2I6Ik2sZwW+jNqjEUIxg2zKmY0nezzFj2JOroKfwRnpcRKPj0t1 PjolUxSdIxfGOiCqsVOYA+qWW/QL6J/AKVIN9XwSFBbhK9cvrUNMn5bD98xRc6qH jAqYLxUf1Jlk3HzCwZKJsL1vlOcFnmxG3bYlUfdqkyGvBuoCU3R/sLuNCiVxKgg0 eCcV1lOz7wlQSFXq8o+d5uEnAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUotDn34ir adtuBZowZOTdweb8nRkwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTNEMkQ4Lzk0OTZENzRFQzkxMTExRjBCMDAxQ0U4M0M0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEzRDJEOC85NDk2RDc0RUM5MTExMUYwQjAwMUNFODNDNEY5QUUwMi9vdERuMzRp cmFkdHVCWm93Wk9UZHdlYjhuUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAghUMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAZ+AUMA8EAgAC MAkDBwAgAQ3xyAAwDQYJKoZIhvcNAQELBQADggEBACiZUkhtfcCpOMKcRHSLzNUs +jy+J8qYPfUqCzlu8+/wG4Q5++yS78ZJFXslP4YgwE3/vmKI2AiH7zAyXkaZVCI+ LvKd+ObCuu8KRqIpRokf/hlIpGewXv43QVEPkDyq7800dnjCx0qThn3G98RYMBVA jAmZwVdjmcO0oGs+lO9Ef1RUDbEtIdUoobuzrUXMLuuRX3+x5UYK+RPi282QbuBe Nui0Ky3FOgimIEIEl3z6MgXoFtgzUEmSn4LbXd409UG2Vt+PXyfDYIRUR9vMN/99 CcQ2EeXhDiQmFa/0gDxOSNaq9hYBtIW42WGwRpOwsQ8HY/sCtGSU01IFS5PDDEY= -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:42 2025 by rpki-client